Second Monitoring Cycle Report released by the Brazilian DPA

On December 08, 2023, the Brazilian Data Protection Authority (“Brazilian DPA” or “ANPD”) released the second Monitoring Cycle Report (“RCM”) of the General Supervisory Office (“CGF”) containing an assessment of the supervisory activities of the first semester of 2023, summarizing the main results of the area, and providing guidelines for the next monitoring cycle.

According to the RCM, the Authority received 496 (four hundred and ninety-six) requests from data subjects comprised of complaints of violations of the Brazilian General Data Protection Law (“LGPD”) and petitions from data subjects (a request from a data subject to exercise their rights in relation to the processing of personal data).

In addition, the Authority received 163 (one hundred and sixty-three) communications of security incidents cases mainly involving data theft caused by security flaws in information systems (ransomware).

The RCM in Portuguese can be accessed here.

Our team is available for further clarification, as well as to advise on the procedures for complying with the regulatory obligations of the LGPD before the Brazilian DPA.

Gustavo Flausino Coelho –

Fernando Naegele –

Get our notifications

Contact us


Rua Helios Seelinger, 155, Barra da Tijuca, Rio de Janeiro, RJ Brasil • 22640-040

Phone number

+55 21 3747 1757


If you would like to join our firm, please send your résumé to

© 2021. Bastilho Coelho Advogados. Todos os direitos reservados. All rights reserved.